Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I switched to new ISP yesterday, they gave me a D-Link router, can't use my old router. I want to change the wireless password, went to 192.168.1.1, I can login with the the username and password user user, but not as admin.

On the catalog it says that the default username and password are admin admin, tried that didn't work. Tried admin and no pass, tried many combinations, none worked.

I asked some other users and they said that the isp is blocking the users from logging in as admins, and blocking the reset button, and said that there's a hack where you do something like:

cmd> telnet "router ip" and do something like dumpcfg

Could you please give a better explanation on how to gain admin privileges on your own router if your isp is not letting you do so by default?

For what it's worth, I live in Lebanon and my ISP is Ogero.

share|improve this question
    
What model is the router? –  sgtbeano Nov 4 '13 at 9:19
    
@sgtbeano DSL-2640U –  Fischer Nov 4 '13 at 9:24
    
Thanks, whilst I take a look - have you asked your ISP for admin access? –  sgtbeano Nov 4 '13 at 9:30
1  
There shouldn't be a reason you cannot purchase your own ADSL modem and change the MAC Address to match the modem you have. From a technical perspective your ISP wouldn't be able to tel the difference. I assume you are in some other country that isn't the US? –  Ramhound Nov 4 '13 at 12:18
1  
@Rudolph thank you all guys for trying to help –  Fischer Nov 5 '13 at 16:25

1 Answer 1

up vote 5 down vote accepted

I managed to crack the password, I'll post the answer as a future reference to future users if you don't mind.

  • Use Telnet (enable it if you're on windows) and connect your laptop to the router using a cable.

  • Open a terminal or command prompt and type telnet 192.168.1.1 or whatever your local IP is. my username and password are user and user they are usually the default username and password for non admin users.

  • type dumpcfg and copy the output to a text file.

  • the output is almost full of crap, so i'm not going to paste it, you're only interested, in two lines, the first is sysUserName value="" and the second is sysPassword value="" usually, it's sysUserName value="admin" and as for the password it's sysPassword value="Base64EncodedString"

  • Go to a Base64 decoder, copy the encoded password string, and click bas64 to normal string. In my case, the encoded password was <sysPassword value="bXkxMTAxMTM="/> i decoded it, so my password was my110113.

I only tried that on D-Link router, I don't know about other routers, but as long as they use Base64, I see no reason why it shouldn't work, and it's not hacking, it's gaining administrative privileges on your own router.

share|improve this answer
    
So what was the password? There is no security threat in sharing this information since we cannot actually connect to your router. –  Ramhound Nov 5 '13 at 16:32
    
@Ramhound the encrypted password was <sysPassword value="bXkxMTAxMTM="/> i decrypted it, so my password was my110113 –  Fischer Nov 5 '13 at 16:43
1  
Interesting. You might update your question and name who your ISP was. I suspect many people might have the same password if they are in a similar position it might help them. –  Ramhound Nov 5 '13 at 16:48
    
@Ramhound good point, done –  Fischer Nov 5 '13 at 17:04
    
@Fischer Quick FYI, it's generally a good practice on this site to mark the answer as "answered", even if you answered your own question (what a mouthful!) There should be an outline of a check mark next to the answer that you posted. If you click that check mark, it'll turn green. –  Michael H Nov 5 '13 at 17:19

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.